8c474cd4bbff2d1d0150463f338b19bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c474cd4bbff2d1d0150463f338b19bb_JaffaCakes118
Size

770KB
MD5

8c474cd4bbff2d1d0150463f338b19bb
SHA1

ffefe720037f94f6c0d2342dc84a24e7395e3643
SHA256

911d61aef6b06df9c5e59420098f118de37fe3800e644c281cdafbb639bd3037
SHA512

d5cd78a346f6d0ee9e435958f15e61f362e406021510eb9fd204c3dd2a3352c66daa16b737da1fd8364b57835aecf1010ad9aa9c679671fd2e44c2655776529f
SSDEEP

12288:VrfOFymkHNxDP2Z2YD81nbLNyvkDvbWvy8dAKlWGmvHoVup2khevVyv:tHNxb241nnQMDvbWvy8dA0kKT2WVyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c474cd4bbff2d1d0150463f338b19bb_JaffaCakes118

Files

8c474cd4bbff2d1d0150463f338b19bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12738f67f7803f422fe4884549e570ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
InterlockedExchange
OpenProcess
GetLastError
GetModuleFileNameW
GetProcessId
CreateThread
Sleep
WaitForMultipleObjects
ExitProcess

msvcrt

_initterm
_controlfp
_j0
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

PathAppendW
UrlCombineW
PathCombineW
UrlGetPartW
UrlApplySchemeW
UrlCanonicalizeW

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ